# account In Windows computing, an account is a security principal with a name and identifier, used to represent users or computers and support authentication and access control. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## T-Mobile rewards points expiry texts are a phishing scam DevFeed: [T-Mobile rewards points expiry texts are a phishing scam]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-17T10:44:01Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [account](), [App]() Tags: [customer](), [links](), [messages](), [phishing](), [points](), [reward-points](), [rewards-points](), [scam](), [scams](), [t-mobile](), [threat-intel]() ### AI overview Malwarebytes reports a phishing campaign that sends fake T-Mobile rewards-point expiry messages. The messages use invented balances, urgent expiry dates, and phishing links to pressure recipients into clicking before verifying the claim. ### Source excerpt A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links. ## KYC Onboarding: From Signup to Accepting Payments DevFeed: [KYC Onboarding: From Signup to Accepting Payments]() Original publisher: [Read original article]() Author: Deepak Jangir Published: 2026-09-17T00:00:00Z Content type: tutorial Language: en Sources: [Dodo Payments Blog]() Topics: [Requirements](), [Security, Privacy and Abuse Prevention](), [account](), [Website]() Tags: [account](), [business](), [credentials](), [guide](), [onboarding](), [payments](), [saas](), [verification](), [website]() ### AI overview This guide explains KYC onboarding for online sellers, including the identity, eligibility, ownership, bank account, and website checks payment providers may perform before enabling payments and payouts. It outlines the onboarding sequence, common causes of delays, and differences between freelancers and companies. ### Source excerpt What KYC onboarding involves when you sign up to sell online: the stages, the documents, why applications stall, and how it differs for freelancers and companies. ## Onboarding roulette and recurring AI "Aha" meetings: ideas for reducing user friction and sharing team learning DevFeed: [Onboarding roulette and recurring AI "Aha" meetings: ideas for reducing user friction and sharing team learning]() Original publisher: [Read original article]() Author: Luca Rossi Published: 2026-08-31T07:03:19Z Content type: opinion Language: en Sources: [Refactoring]() Topics: [meetings](), [Artificial Intelligence](), [Users](), [account](), [App](), [Mobile](), [Support]() Tags: [account](), [ai](), [app](), [meetings](), [mobile](), [process](), [support](), [users]() ### AI overview This newsletter presents two team practices. Graphite randomly deletes an employee's account so they repeatedly experience product onboarding and uncover friction. It also describes recurring AI "Aha" meetings where everyone shares an AI-related win, failure, surprise, or odd discovery. ### Source excerpt Monday Ideas -- Edition #223 ## Hpf-passwd: Easily change passwords while using \`hashedPasswordFile\` DevFeed: [Hpf-passwd: Easily change passwords while using \`hashedPasswordFile\`]() Original publisher: [Read original article]() Author: Anomalocaris Published: 2026-07-31T01:54:54Z Content type: article Language: en Sources: [Announcements - NixOS Discourse]() Topics: [passwords](), [passwd](), [configuration](), [account](), [systems]() Tags: [announcements](), [config](), [passwd](), [passwords](), [script](), [systems]() ### AI overview The author introduces hpf-passwd, a standalone script for changing passwords for NixOS user accounts configured with hashedPasswordFile. It imitates passwd's semantics but is not a complete drop-in replacement and currently lacks features such as password expiration management. ### Source excerpt For a while, I've used users.users.*.hashedPasswordFile with users.mutableUsers = true to minimize configuration drift. However, as far as I could tell, no one had created a convenient way to set or change these passwords, so I wrote a quick and dirty script and called it a day. More recently, I was reworking this script and realized I could decouple it completely from my config, spin it off into its own project, and polish it up so other people could benefit from it. The result is hpf-passwd. Currently, it's a single script that mainly just lets you change the password of a given user account, provided it has users.users..hashedPasswordFile set. Befitting its name, it tries to mimic passwd's semantics to try to be intuitive. However, it can never be a 1:1 drop-in replacement. As far as I am aware, there is no way to set things like expiration dates for passwords managed like this. I plan to eventually add some more features, like a chpasswd-style script, and features that ensure all the users with hashedPasswordFile have a password set to help with bootstrapping, but it's currently pretty barebones. However, it is enough for my personal needs at the moment and so I figure it is a good time to get some more eyes on it. github.com GitHub - Anomalocaridid/hpf-passwd: Manage passwords on NixOS systems that use... Manage passwords on NixOS systems that use `hashedPasswordFile` 1 post - 1 participant Read full topic ## Track customer loyalty points with durable workflows DevFeed: [Track customer loyalty points with durable workflows]() Original publisher: [Read original article]() Author: Cecil Phillip Published: 2026-06-03T00:00:00Z Content type: tutorial Language: en Sources: [Temporal Blog]() Topics: [account](), [business logic](), [Database](), [real-time](), [locking](), [retry](), [service](), [upgrade](), [Mobile]() Tags: [account](), [business-logic](), [customer](), [database](), [locking](), [loyalty](), [loyalty-points](), [mobile](), [process](), [query](), [real-time](), [retry](), [service](), [temporal](), [temporal-concepts](), [upgrades](), [workflows]() ### AI overview This article explains how to track customer loyalty points with durable Entity Workflows in Temporal. Each customer has a persistent workflow that maintains points, tier status, and activity history, while Signals handle accruals, Updates validate redemptions, and Queries read current balances. ### Source excerpt Track loyalty points with durable Entity Workflows in Temporal. See how to handle accruals, tier upgrades, and redemptions for each customer. ## Promies Feedback Board: A simple way to collect user feedback in your apps DevFeed: [Promies Feedback Board: A simple way to collect user feedback in your apps]() Original publisher: [Read original article]() Author: Mike Yerou Published: 2026-05-05T10:46:53Z Content type: article Language: en Sources: [Rock and Null]() Topics: [Mobile](), [App](), [notifications](), [email](), [account]() Tags: [android](), [apps](), [email](), [extension](), [ios](), [mobile-apps](), [notifications](), [product]() ### AI overview Promies Feedback Board is a tool for mobile app developers to collect user ideas, issue reports, and feature votes in one place. It supports customizable boards, public responses, status updates, CAPTCHA-protected voting, subscriptions, statistics, and email notifications. ### Source excerpt Promies Feedback Board gives you a single, vote-protected hub to see exactly which features your users actually want. ## Why I Choose Not to Publish Photos of My Child Online DevFeed: [Why I Choose Not to Publish Photos of My Child Online]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2026-03-06T00:00:00Z Content type: opinion Language: en Sources: [Carlos Becker]() Topics: [Internet](), [Instagram](), [account]() Tags: [account](), [identity-theft](), [instagram](), [internet]() ### AI overview The author explains why they choose not to publish photos of their child online, citing the lack of clear benefit, risks involving account access and strangers, and the child's future right to decide whether their images are shared. ### Source excerpt I became a dad recently, and I'm not publishing a bunch of photos of my kid like most parents do. Some people started asking me why, so here it is. ## Insecure Dava India Pharmacy APIs Exposed Super Admin Users and Enabled Privileged Account Creation DevFeed: [Insecure Dava India Pharmacy APIs Exposed Super Admin Users and Enabled Privileged Account Creation]() Original publisher: [Read original article]() Author: Eaton Published: 2026-02-14T03:07:20Z Content type: article Language: en Sources: [Eaton Works Feed]() Topics: [Exploit](), [Hacking](), [Website](), [account](), [password reset](), [passwords](), [Next.js]() Tags: [account](), [exploit](), [hacking](), [next-js](), [password](), [website]() ### AI overview A security write-up describes insecure super-admin APIs on Dava India Pharmacy's website. The APIs exposed a list of super-admin users without authentication, and testing indicated that creating a super-admin account was a supported operation. ### Source excerpt Super admin exploit on Dava India Pharmacy's website gave complete control over everything. ## Durable Digest: November 2025 DevFeed: [Durable Digest: November 2025]() Original publisher: [Read original article]() Author: Temporal Technologies Published: 2025-11-25T00:00:00Z Content type: article Language: en Sources: [Temporal Blog]() Topics: [Monitoring](), [Prometheus](), [Authorization](), [Large Language Model](), [Model Context Protocol](), [SIEM, Security, Observability](), [Amazon S3](), [configuration](), [account](), [export]() Tags: [announcements](), [aws-s3](), [blog-post](), [llm](), [mcp](), [observability](), [permissions](), [preview](), [prometheus]() ### AI overview Temporal's November 2025 Durable Digest reviews recently shipped Temporal Cloud features, including group-based permissions, SCIM user management, environment configuration, workflow history export to object storage, and an OpenMetrics endpoint. It also highlights a durable stateful agents project using Mistral, Temporal, and MCP. ### Source excerpt Recently shipped features, real-world fixes from the field, a Builder Spotlight straight from the Code Exchange, fresh AI how-tos, and where to meet us live. ## Vulnerabilities in a centralized automaker dealer platform enabled access to more than 1,000 US dealerships DevFeed: [Vulnerabilities in a centralized automaker dealer platform enabled access to more than 1,000 US dealerships]() Original publisher: [Read original article]() Author: Eaton Published: 2025-10-13T15:13:09Z Content type: article Language: en Sources: [Eaton Works Feed]() Topics: [vulnerability](), [Exploit](), [Hacking](), [account]() Tags: [account](), [automotive-industry](), [hacking](), [us](), [vulnerabilities](), [vulnerability]() ### AI overview The article describes two vulnerabilities in a top automaker's centralized dealer platform: missing invite-token verification and a missing privilege check in account creation. The author states that these flaws enabled creation of a national admin account with access to systems across more than 1,000 US dealerships. ### Source excerpt On August 10, 2025 at DEF CON 33 in Las Vegas, I presented what could possibly be the biggest vulnerability I may ever discover in the automotive industry. Read and watch how I managed to take over a top automaker's entire dealer ecosystem. ## Why We Don't Call Them SDRs Anymore: Inside Teleport's Take on Modern Sales Development DevFeed: [Why We Don't Call Them SDRs Anymore: Inside Teleport's Take on Modern Sales Development]() Original publisher: [Read original article]() Author: amanda.pessica@goteleport.com (Amanda Pessica) Published: 2025-05-16T00:00:00Z Content type: opinion Language: en Sources: [Teleport]() Topics: [Job](), [account](), [meetings]() Tags: [account](), [ai](), [approach](), [company](), [enterprise](), [hiring](), [messaging](), [sales](), [strategy]() ### AI overview Teleport explains why it replaced the SDR title with Account Development Representative, arguing that modern enterprise sales development requires personalized, research-driven outreach, brand knowledge, strategic persistence, and an updated hiring process. ### Source excerpt Discover why Teleport is moving beyond the SDR title--and how our modern approach to sales development is reshaping hiring, outreach, and success. ## How to verify a Google Play account without publicly exposing a home address and phone number DevFeed: [How to verify a Google Play account without publicly exposing a home address and phone number]() Original publisher: [Read original article]() Author: Jake Lee Published: 2025-01-19T00:00:00Z Content type: tutorial Language: en Sources: [Jake Lee's Programming Blog]() Topics: [Google Play](), [account](), [App](), [Android](), [console]() Tags: [android](), [androiddev](), [app](), [company](), [google-play](), [how-to](), [payments](), [privacy](), [verification]() ### AI overview This tutorial explains how a Google Play developer can avoid publicly exposing a home address and phone number during verification. It describes forming a company with a forwarding address, creating a new Organisation Google Play profile, verifying it with the company's information, and transferring apps and associated services. ### Source excerpt In 2023, Google began requiring verification for Google Play, especially if earning any money. Unfortunately, this required publicly exposing your home address and phone number! Here's how to earn money without revealing this info. ## Welkom bij OpenTK (deel 2): de monitors DevFeed: [Welkom bij OpenTK (deel 2): de monitors]() Original publisher: [Read original article]() Published: 2024-12-13T14:13:41Z Content type: tutorial Language: nl Sources: [Bert Hubert's writings]() Topics: [API](), [monitor](), [Open Data](), [email](), [Open Source](), [account](), [Internet]() Tags: [account](), [api](), [data](), [email](), [internet](), [monitor](), [open-source](), [opentk](), [politiek](), [project]() ### AI overview This Dutch article explains how OpenTK uses the Tweede Kamer's technical API and open parliamentary data to help users monitor committees, people, dossiers, searches, cases, and activities. Users can link an email address to receive matching-document notifications, with duplicate matches combined into a single email. ### Source excerpt Welkom! Goed inzicht in ons parlement is belangrijk, soms omdat er dingen in het nieuws zijn. En soms juist omdat dingen (nog) niet in het nieuws zijn, maar er binnenkort wel besluiten over genomen gaan worden. De Tweede Kamer publiceert alles wat ze doen via een technische API, en dat is echt geweldig. Hierdoor kunnen we op Internet eigen viewers maken om deze data zo goed mogelijk zichtbaar te maken. ## SFTP Upload Failures in a Financial Institution's Daily Account Transfer Process DevFeed: [SFTP Upload Failures in a Financial Institution's Daily Account Transfer Process]() Original publisher: [Read original article]() Author: Angie Byron Published: 2024-10-09T16:00:00Z Content type: article Language: en Sources: [Temporal Blog]() Topics: [Transactions](), [Server](), [Network](), [file](), [Database](), [account](), [Software]() Tags: [account](), [community](), [database](), [failed](), [file](), [financial](), [network](), [server](), [sftp](), [transactions]() ### AI overview A fictional story illustrates a financial institution's real-world migration of its daily sweep process to Temporal. The institution used SFTP to exchange account balances and transfers, but frequent upload and download failures, overloaded servers, and database-load-related query failures regularly required employee intervention. ### Source excerpt The bank on the edge of town was haunted - or at least, that's what folks often said. ## How we grew Mintlify by doing things that don't scale DevFeed: [How we grew Mintlify by doing things that don't scale]() Original publisher: [Read original article]() Author: Han Wang Published: 2024-01-26T00:00:00Z Content type: opinion Language: en Sources: [Mintlify Blog]() Topics: [Documentation](), [account]() Tags: [acquisition](), [building](), [customer](), [doing](), [for-founders](), [product](), [scale](), [startup](), [validation]() ### AI overview A personal account from Mintlify's founder describes growing the company from zero to more than 1,000 customers by using labor-intensive tactics, such as manually migrating documentation and building custom documentation for cold prospects. The article argues that early-stage startups should prioritize customer acquisition and validation over perfect products. ### Source excerpt Most people envision the process of founding a startup to play out like this: the founders brainstorm around a whiteboard, there is a lightbulb moment when a golden idea is born, users flock to the startup the day the product is launched, and then the founders ride off into the sunset to build a successful billion dollar company. ## Identity Governance & Security, Community Survey, AWS re:Invent and more. DevFeed: [Identity Governance & Security, Community Survey, AWS re:Invent and more.]() Original publisher: [Read original article]() Author: info@goteleport.com (Ben Arent) Published: 2023-11-16T00:00:00Z Content type: news Language: en Sources: [Teleport]() Topics: [Security](), [audit](), [authz](), [account](), [Kubernetes](), [Amazon Web Services]() Tags: [account](), [audit](), [authz](), [aws](), [devsecops](), [events](), [kubernetes](), [security](), [survey]() ### AI overview Teleport's newsletter highlights its Identity Governance & Security launch, including account and infrastructure access monitoring, audit logs, access reviews, and just-in-time access requests. It also announces a Teleport community survey, AWS re:Invent activities, and a Kubernetes security panel. ### Source excerpt An online version of Teleports monthly newsletter. Covering the latest news, events, and updates from the Teleport team. ## Hacking into Toyota's global supplier management network DevFeed: [Hacking into Toyota's global supplier management network]() Original publisher: [Read original article]() Author: Eaton Published: 2023-02-06T16:22:56Z Content type: article Language: en Sources: [Eaton Works Feed]() Topics: [backdoor](), [Hacking](), [Security](), [Vulnerabilities](), [Web app](), [account]() Tags: [account](), [backdoor](), [data](), [exploit](), [hacking](), [vulnerabilities](), [web-app]() ### AI overview A security researcher describes exploiting Toyota's Global Supplier Preparation Information Management System (GSPIMS), a web application used by Toyota employees and suppliers. An accidentally introduced backdoor in an impersonation feature enabled login as users, including administrators, using only their email addresses. The researcher reported the issue to Toyota in November 2022, and Toyota fixed it in a timely manner. ### Source excerpt Inside an exploit that allowed logging in to Toyota's GSPIMS application as any user, including system admins. ## AWS IAM and Cost Explorer CLI Setup DevFeed: [AWS IAM and Cost Explorer CLI Setup]() Original publisher: [Read original article]() Published: 2023-02-01T16:15:02Z Content type: tutorial Language: en Sources: [Signs of Triviality]() Topics: [AWS IAM](), [Command-line interface](), [IAM](), [Amazon Web Services](), [account]() Tags: [account](), [admin](), [aws](), [aws-iam](), [cli](), [command](), [command-line](), [how-to](), [iam](), [setup]() ### AI overview A tutorial on creating an IAM administrator user and configuring another AWS account to use Cost Explorer from the command line. ### Source excerpt How to create an IAM admin user and configure another account to use Cost Explorer on the command-line. ## What the Twitter Hack Revealed About Common Company Security Flaws DevFeed: [What the Twitter Hack Revealed About Common Company Security Flaws]() Original publisher: [Read original article]() Author: info@goteleport.com (Virag Mody) Published: 2020-11-11T00:00:00Z Content type: opinion Language: en Sources: [Teleport]() Topics: [X (Twitter)](), [Social engineering](), [account](), [Virtual Private Network](), [Logging]() Tags: [attacks](), [bitcoin](), [credentials](), [logging](), [post-mortem](), [social-engineering](), [techniques](), [twitter](), [vpn]() ### AI overview This commentary examines the 2020 Twitter hack, arguing that the incident exposed security weaknesses common across companies. It describes credential theft through impersonation and social engineering, followed by access to an internal account-management tool and Bitcoin scam messages. ### Source excerpt The Twitter hack was not orchestrated by a nation state. Twitter was hacked by an average teenager who was too young to have his own driver's license. ## In-App Purchase Rules DevFeed: [In-App Purchase Rules]() Original publisher: [Read original article]() Author: Marco Arment Published: 2020-09-11T20:08:06Z Content type: opinion Language: en Sources: [Marco.org]() Topics: [App](), [account]() Tags: [app](), [payment](), [regulatory]() ### AI overview The article summarizes Apple's updated in-app purchase rules, emphasizing their many exceptions and restrictions. It argues for a clearer policy allowing alternative payment mechanisms when terms are clear and customers are not misled. ### Source excerpt A summary of today's changes to 3.1.3 Other Purchase Methods: Your app must use Apple's in-app-purchase (IAP) system for all purchases made in the app. Unless they're purchases for goods or services that are consumed outside the app, in which case you are prohibited from using IAP. Unless those goods or services consumed outside the app are magazines, newspapers, books, audio, music, or video, in which case, you are required to use IAP. But if your app only "reads" previously purchased magazines, newspapers, books, audio, music, or video, and doesn't mention the possibility of purchases anywhere in the app, you don't need to use IAP. Unless you offer account creation, in which case, you are required to use IAP. Unless you only offer free account creation, in which case, you don't need to use IAP. But if you offer paid upgrades from free accounts within the app, you are required to use IAP. Except for accounts that were created outside the app, which can offer paid account upgrades and don't need to use IAP. If you're selling "experiences" between people, you don't need to use IAP. Unless those "experiences" include three or more people, or aren't consumed live, in which case, you are required to use only IAP. If your purchase is for services, features, or game items, you are required to use only IAP. Unless you operate on multiple platforms, in which case, you can also offer purchasing outside the app. But you can't tell anyone about it. Unless you get their contact info somewhere else, in which case, you can tell them about it, but not in the app. You are required to use IAP even if you sell your app or service directly to other people. Unless you only sell it to businesses or groups for their employees or students to use, in which case, you still must use IAP, but you can include your own payment method as well. Unless those groups are families, or unless those employees or students are somehow "consumers", in which case, you must only use IAP. Do I have that righ ## Getting Past Ansible Password Required Issues DevFeed: [Getting Past Ansible Password Required Issues]() Original publisher: [Read original article]() Author: Fuzzygroup Published: 2020-06-03T00:00:00Z Content type: tutorial Language: en Sources: [Scott Johnson]() Topics: [Ansible](), [passwords](), [account]() Tags: [account](), [ansible](), [apt](), [command](), [exploits](), [localhost](), [module](), [password]() ### AI overview This tutorial explains how to resolve Ansible's "sudo: a password is required" failure when running tasks after switching into the jenkins account. The author attributes the problem to Ansible's become operation and describes temporarily granting passwordless sudo access through visudo, then removing the account entry afterward. ### Source excerpt I recently had the situation where I needed to run an Ansible task on a user which I sudo su'd into i.e.: sudo su jenkins I then ran my Ansible task and I repeatedly got this error: TASK [zzet.rbenv : update apt cache] **************************************************************************************************************** fatal: [localhost]: FAILED! => {"changed": false, "module_stderr": "sudo: a password is required\n", "module_stdout": "", "msg": "MODULE FAILURE\nSee stdout/stderr for the exact error", "rc": 1} The underlying issue was that most of the tasks in the playbook used: become: true which says to Ansible "run this as a sudo operation" and, given that I was already sudo'd into this account, that proved to be a failure. I puzzled over this for a bit and then realized that all I needed to do was grant the jenkins account passwordless sudo access via the command: sudo visudo by adding this line to the end of the sudoers file that visudo edits: jenkins ALL=(ALL) NOPASSWD:ALL Note: I made sure to remove the jenkins account from visudo after this was done to prevent any issues related to sudo exploits and this user. ## Apple has locked me out of my developer account (UPDATED) DevFeed: [Apple has locked me out of my developer account (UPDATED)]() Original publisher: [Read original article]() Published: 2019-11-20T13:00:00Z Content type: opinion Language: en Sources: [Rambo Codes]() Topics: [account](), [Xcode]() Tags: [account](), [apple](), [developer](), [security](), [xcode]() ### AI overview The author describes being unable to access an Apple developer account from August 2019. The account was marked inactive, preventing access to the developer portal, certificates, builds, push notification services, and the developer team in Xcode. After repeated support contacts and escalations, Apple resolved the situation on November 22, 2019. ### Source excerpt Gui Rambo writes about his coding and reverse engineering adventures. ## Book (P)review: Living by the Code DevFeed: [Book (P)review: Living by the Code]() Original publisher: [Read original article]() Author: Márton Braun Published: 2019-09-09T13:00:00Z Content type: opinion Language: en Sources: [zsmb.co]() Topics: [Job](), [account]() Tags: [android](), [book](), [careers](), [interviews](), [kotlin](), [marton-braun](), [opinions](), [people](), [remote](), [remote-work](), [review](), [work](), [zsmb](), [zsmb-co](), [zsmb13](), [zsmbco]() ### AI overview A brief review of Living by the Code, a book of interviews with developers, leaders, and innovators about careers in technology. The article highlights themes including morning routines, remote work, flexibility, and the importance of embedding remote work in company culture. ### Source excerpt I can't tell you how much I've been anticipating this book ever since I first heard it announced. This is a very short review, because really, you should read it yourself. But let me spoil one thing: It's amazing. ## What's Coming To Keycloak DevFeed: [What's Coming To Keycloak]() Original publisher: [Read original article]() Author: Stian Thorgersen Published: 2019-09-03T00:00:00Z Content type: opinion Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [account](), [React](), [WebAuthn](), [Kubernetes](), [Operator Lifecycle Manager](), [API](), [Encryption](), [LDAP](), [health checks](), [Testing]() Tags: [account](), [api](), [authentication](), [automated](), [console](), [encryption](), [health-checks](), [idm](), [kerberos](), [keycloak](), [kubernetes](), [kubernetes-secrets](), [ldap](), [openid-connect](), [operator](), [password](), [rest-api](), [saml](), [software](), [sso](), [usability](), [user-experience](), [vault]() ### AI overview Keycloak's 2019 roadmap outlines planned work on a new React-based account console, WebAuthn authentication, a Kubernetes operator, external vault integration, user profiles, metrics and health checks, and improved automated testing and builds. ### Source excerpt New Account Console and Account REST API The current account console is getting dated. It is also having issues around usability and being hard to extend. For this reason we had the UXD team at Red Hat develop wireframes for a new account console. The new console is being implemented with React.js providing a better user experience as well as making it easier to extend and customise. JIRA - Account Console JIRA - Account REST API WebAuthn We are working towards adding WebAuthn support both for two factor authentication and passwordless experience. This task is not as simple as adding an authenticator for WebAuth, but will also require work on improving authentication flows and the account console. Design proposal - Authentication flow improvements Design proposal - WebAuthn Authenticator Design proposal - WebAuthn Two factor JIRA - Two factor JIRA - Passwordless Operator Operators are becoming an important way to manage software running on Kubernetes and we are working on an operator for Keycloak. The aim is to have an operator published on OperatorHub.io soon which provides basic install and seamless upgrade capabilities. This will be based on the awesome work done by the Red Hat Integreatly team. JIRA Integreatly Keycloak Operator Vault At the moment to keep credentials such as LDAP bind credentials more secure it is required to encrypt the whole database. This can be complex and can also have a performance overhead. We are working towards enabling loading credentials, such as LDAP bind credential and SMTP password, from an external vault. We're providing a built-in integration with Kubernetes secrets as well as an SPI allowing integrating with any vault provider. In the future we will also provide the option to encrypt other more dynamic credentials at rest in the database. JIRA - Vault JIRA - Encryption at rest User Profile Currently there's no single place to define user profiles for a realm. To resolve this we are planning to introduce the Profile SPI, which w [Next page]()